VULNERABILITY INTELLIGENCE

CVE-2011-4091

CVSS score5 MEDIUM
EPSS probability2.73%
CISA KEVNot currently listed
Published2014-02-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.

Weakness classification

  • CWE-287: Improper Authentication

Primary references